madeofpalk 3 years ago

What is ‘GitHub Next’? Is this an official GitHub project? It’s not on the github.com domain, so it doesn’t look like it. What signals do I have to know that this site is trustworthy?

I click ‘get started’, and it wants me to hand over access to my GitHub account to see all private resources I have and "act on [my] behalf" to some unknown "blocks" third party.

How do I determine whether this website is some kind of phishing scam, or legit? Everything everyone always says ("check the domain!") rings alarm bells.

  • idan 3 years ago

    A couple of proofs!

    next.github.com redirects to the site

    You can see Blocks and Hey, GitHub! on https://github.com/features/preview

    Watch Kyle's universe session linked elsewhere in the thread, he's going to be showing off a variety of projects from GitHub Next

    There are some very good reasons why we exist outside the primary domain — mostly security-related! The blast radius of our experimentation should not include github.com :D

    • judge2020 3 years ago

      The oauth prompt reads "Not owned or operated by GitHub"; should get that changed if this is operated on behalf of the company.

    • jdgoesmarching 3 years ago

      FYI, the website is a mess for me on Safari for iOS and iPadOS

transitivebs 3 years ago

Will this become an open source project / standard like markdown?

imho that is a really, really important piece of this puzzle.

gremlinmatt 3 years ago

The SSO authorization requires "Act on your behalf" permissions, and says "Not owned or operated by GitHub" at the bottom of the authorize page. This is suspicious to me.

I would expect the messaging to reflect this is owned by GitHub if GitHub Next is owned by GitHub.